CVE-2013-1199: Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cis...

Security readout for executives and security teams

This issue can make a Cisco ASA device reload when an authenticated Clientless SSL VPN user accesses CIFS resources across multiple sessions. The business risk is availability: VPN service interruption, not confirmed data theft or privilege escalation. Exposure is likely limited to Cisco ASA deployments using Clientless SSL VPN with CIFS resource access enabled. The bundle does not identify affected ASA versions or configurations beyond that component. Treat as a targeted availability risk for VPN infrastructure. Prioritize if Clientless SSL VPN with CIFS is internet-facing or business-critical; otherwise handle through normal Cisco ASA maintenance. Mitigation focus: Review Cisco advisory CSCub58996 for affected versions, fixed releases, and workarounds.; Inventory ASA devices using Clientless SSL VPN and CIFS resource access.; Restrict Clientless SSL VPN access to trusted users where operationally feasible..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.